https://github.com/microsoft/Dhalion/blob/526ec77ee6ddbc5fecff21ddbb96e27584df9301/pom.xml#L206 CVE-2017-18640 Recommended upgrade version: 1.26